Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
File: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft (raw, json)
Hash identifier: +PFI/EjlCt2elAcDBPxLA3X03JayVWkwMRbTpUEuvrI=
Subject key identifier: 64:1C:7D:F2:A5:A7:DE:8F:75:3D:04:74:3F:8D:64:21:DA:A7:C3:F9
Authority key identifier: 7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
Certificate issuer: /CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Certificate serial: 019A71B85D8265CF28ED21490CCE01645C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
Manifest number: 06DB
Signing time: Tue 11 Nov 2025 07:01:39 +0000
Manifest this update: Tue 11 Nov 2025 07:01:39 +0000
Manifest next update: Wed 12 Nov 2025 07:01:39 +0000
Files and hashes: 1: e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl (hash: /IQRR1opM8Chf6woHdXCGixxm7x+XThgTrYdSrjvQg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5d:82:65:cf:28:ed:21:49:0c:ce:01:64:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc7be521d17a6a592cc61f7914c25f16957cc9c
Validity
Not Before: Nov 11 07:01:39 2025 GMT
Not After : Nov 12 07:01:39 2025 GMT
Subject: CN=641c7df2a5a7de8f753d04743f8d6421daa7c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:b0:c9:ae:51:97:59:fe:45:a3:2d:26:99:
d6:1d:e6:3f:42:50:f5:85:94:89:98:24:e0:8a:8d:
2b:11:8e:4c:4b:5e:79:a7:b5:cf:4f:c7:8d:9b:75:
45:59:19:83:4f:65:eb:ec:a6:89:76:dd:2d:c2:d3:
6d:26:c4:08:2b:0a:50:62:97:06:ae:c2:cd:25:2a:
eb:44:72:2a:26:4e:80:05:e3:e4:11:a8:05:97:7a:
4a:87:d9:6d:4e:92:00:c8:5c:48:1b:d0:32:51:27:
db:4c:e1:9e:05:c2:52:23:64:02:75:45:66:a4:a5:
ed:c6:97:6e:36:6a:c9:2f:c5:e6:cb:4f:7d:01:c3:
c1:b1:09:b2:fc:7b:70:8e:bf:22:06:f1:8c:33:6a:
41:82:c7:92:94:cc:8a:a9:cf:3e:ef:f3:58:36:f5:
78:51:d0:9c:f2:7f:bb:8d:46:b2:00:47:b1:39:c0:
19:35:20:07:b1:4d:9a:8b:ac:d0:f4:dd:a5:2c:bf:
5b:e6:f8:15:fe:a8:bd:45:15:56:6c:fb:f8:38:f9:
fb:de:4c:fd:4d:60:ef:c4:ff:fa:ed:80:56:49:62:
88:da:e5:1f:99:83:a0:6b:7c:d7:43:88:e8:d9:87:
c1:f4:92:0e:39:88:0f:82:c4:11:7b:56:ad:f7:9c:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1C:7D:F2:A5:A7:DE:8F:75:3D:04:74:3F:8D:64:21:DA:A7:C3:F9
X509v3 Authority Key Identifier:
keyid:7B:C7:BE:52:1D:17:A6:A5:92:CC:61:F7:91:4C:25:F1:69:57:CC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e2be5c-0e67-4f82-97c2-105d8002149d/1/e8e-Uh0XpqWSzGH3kUwl8WlXzJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:07:8e:c6:01:07:7d:21:bd:19:b7:9d:e9:18:a3:af:cc:a8:
24:db:29:7e:38:fa:60:ff:cd:64:65:0c:3b:16:76:95:71:31:
1c:71:ed:77:1d:90:4f:f4:b1:3a:9d:08:b8:08:29:ec:a6:a1:
b1:b8:38:d0:74:50:7b:dc:cb:e2:12:c5:4a:9f:93:d3:53:16:
a5:08:69:c9:db:75:11:7b:37:3f:0c:4b:da:88:3b:50:db:94:
c9:0e:67:7c:db:50:42:a1:45:b1:14:cb:f4:19:5d:a9:70:95:
be:75:1a:ea:26:11:04:6c:7d:4e:27:5d:d8:f3:9d:a3:a9:1c:
3f:4f:7a:b6:73:65:3d:57:5e:e6:d8:f6:cb:e2:04:38:b5:32:
ff:3d:64:11:51:b9:c6:71:78:2c:ec:a8:dc:50:dd:a8:ea:42:
d5:3b:ed:1f:84:fa:48:da:6c:ed:9e:0d:9e:55:58:7e:21:82:
97:8a:25:a4:df:8b:ce:3c:d5:02:97:68:f1:7c:fd:97:ce:e4:
28:14:94:09:31:8f:e5:9b:5e:5b:f6:75:1b:e7:06:24:bd:35:
6f:e6:af:79:c5:70:0a:82:1b:15:50:93:08:bd:93:60:85:e5:
d4:fe:ce:f4:a0:6a:4e:18:0b:10:68:7b:79:4e:a9:5f:b9:36:
f0:2c:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:03 2025 by rpki-client